$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft File: PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft (raw, json) Hash identifier: gBni0MpDcDbOse2CRoWgdlm98On2e2kF9RykgTDOyig= Subject key identifier: 21:5F:0B:44:10:6D:1F:DF:0C:11:43:17:7C:AE:11:C4:24:42:69:FC Authority key identifier: 3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC Certificate issuer: /CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC Certificate serial: 0946 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft Manifest number: 089F Signing time: Sun 20 Sep 2026 21:08:46 +0000 Manifest this update: Sun 20 Sep 2026 21:08:45 +0000 Manifest next update: Sun 27 Sep 2026 21:08:45 +0000 Files and hashes: 1: PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl (hash: EeaRpvfGOc91w567u7EtKvWBraXJAT7MKO4IZ9jzYvw=) 2: 5B2236E6FD6D11EE951DE436C4F9AE02.roa (hash: wVxc6nx/JmhL7VCPOsNGEB8sGimUMjqS6K/WHE14sqo=) 3: 5CDB2402FD6D11EE951DE436C4F9AE02.roa (hash: GPPwnFCIcpt0RgF++70GuCleWCDXuGcVYR4o3iza94k=) 4: E2FEA6DA3E5411EF9B398D2DC4F9AE02.roa (hash: 4maJF9WUbj7sjherc9bKMjHY3wXl4HcmhFEcf5r/F/Q=) 5: 0112375EA05411EDB043385AC4F9AE02.roa (hash: wt7sHeBZYX3+ynpGbSY8k/1ymNfDI2lkoFnaTMVP/Ps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2374 (0x946) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB7AB, serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC Validity Not Before: Sep 20 21:08:45 2026 GMT Not After : Sep 27 21:08:45 2026 GMT Subject: CN=6ab04b5d-c77f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fe:1d:3a:b9:d7:04:e4:e5:15:59:e1:8b:65: 30:8f:17:77:25:a2:46:ba:06:79:1a:a5:52:8c:60: a7:5e:98:46:60:e3:7b:cc:4d:bb:23:79:0e:22:e5: a6:0c:2c:b9:31:4b:5e:fd:08:e9:5c:a1:b1:c1:be: 2d:02:c5:ca:ab:91:a2:46:8c:1c:a0:b9:34:a1:32: 04:2b:fa:92:61:2e:c7:d1:f4:64:7a:0e:4a:d8:27: c1:51:36:55:8a:37:a5:b9:4c:dd:45:e7:21:c3:da: 5d:08:5c:4c:5b:84:32:ed:4c:fc:19:68:e7:6e:57: 48:55:14:e0:6f:4a:d1:5d:df:86:11:e4:00:ef:94: 6a:49:9f:08:f5:23:c9:4d:e3:57:7d:68:85:26:3b: 23:b2:c8:a1:2f:73:49:b5:8c:80:87:1d:57:30:35: 19:6f:84:8d:cd:4a:39:ad:06:b7:da:b6:67:dc:fc: 62:18:f6:a8:58:45:4d:d9:61:66:43:1d:e4:4e:66: e3:09:86:60:b6:bd:4c:13:a1:5a:ae:f5:74:2e:1e: dc:7b:34:db:c3:28:5e:59:66:62:ab:37:36:e8:99: 0e:26:56:bf:0c:0e:5d:4a:4e:d4:85:3c:01:12:7b: 34:fb:e2:8b:81:9d:12:2f:73:cd:f6:6e:d5:26:01: 2c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5F:0B:44:10:6D:1F:DF:0C:11:43:17:7C:AE:11:C4:24:42:69:FC X509v3 Authority Key Identifier: keyid:3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:c5:80:0e:84:21:92:3a:c5:38:2a:53:5f:7e:ac:32:ea:4b: bb:7a:79:52:b5:cc:98:74:22:05:34:db:fc:30:4f:23:e0:9b: c0:44:47:61:24:09:36:f8:aa:34:68:ff:8a:20:eb:c7:94:cd: 96:2d:a4:88:45:12:96:73:dc:89:b7:15:16:8c:d5:b5:f9:e7: c8:5f:bb:b5:63:4e:3a:eb:4a:ff:6f:ce:0b:38:14:56:56:4e: eb:c0:b4:6c:b0:a5:b8:47:c1:67:7a:1f:06:fb:81:88:b7:02: 3b:03:6e:b0:77:71:7a:20:38:84:07:17:2b:98:83:b3:66:03: 7d:64:e5:d4:cb:48:6d:25:97:cc:a3:d9:92:e1:af:c7:f6:d2: b0:93:b1:a1:e4:ac:9b:d6:85:83:69:e9:e3:50:4c:5b:53:07: b3:47:ff:c3:e5:ee:53:b2:43:57:a4:c9:bf:ec:d2:a0:75:8a: ea:43:4c:59:0a:c7:33:ff:e4:85:e9:db:f8:a1:b2:ae:16:88: 11:04:3b:c0:71:52:25:ee:02:ec:e3:c0:df:f6:04:15:93:be: 31:1c:93:7f:6a:57:85:ec:f9:07:9a:a5:63:74:2b:7c:3a:35: 2a:53:2b:9f:5d:f1:3c:3a:4a:9f:18:d3:9d:1a:ad:48:c4:1d: 9f:d6:e0:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I3QUIxMTAvBgNVBAUTKDNERTlEM0RGRjZFMDQ4RkQ5MDgxNDY1MDJFNEYwOEU0 NTZGM0Q5QkMwHhcNMjYwOTIwMjEwODQ1WhcNMjYwOTI3MjEwODQ1WjAYMRYwFAYD VQQDEw02YWIwNGI1ZC1jNzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsv4dOrnXBOTlFVnhi2Uwjxd3JaJGugZ5GqVSjGCnXphGYON7zE27I3kOIuWm DCy5MUte/QjpXKGxwb4tAsXKq5GiRowcoLk0oTIEK/qSYS7H0fRkeg5K2CfBUTZV ijeluUzdRechw9pdCFxMW4Qy7Uz8GWjnbldIVRTgb0rRXd+GEeQA75RqSZ8I9SPJ TeNXfWiFJjsjssihL3NJtYyAhx1XMDUZb4SNzUo5rQa32rZn3PxiGPaoWEVN2WFm Qx3kTmbjCYZgtr1ME6FarvV0Lh7cezTbwyheWWZiqzc26JkOJla/DA5dSk7UhTwB Ens0++KLgZ0SL3PN9m7VJgEsAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCFfC0QQ bR/fDBFDF3yuEcQkQmn8MB8GA1UdIwQYMBaAFD3p09/24Ej9kIFGUC5PCORW89m8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjdBQi81Njc4NjU2ODQw MDkxMUVCQTM3NDIyNUJDNEY5QUUwMi9QZW5UM19iZ1NQMlFnVVpRTGs4STVGYnoy YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BlblQzX2JnU1AyUWdVWlFMazhJNUZiejJidy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjdBQi81Njc4NjU2ODQwMDkxMUVCQTM3NDIyNUJDNEY5QUUwMi9QZW5UM19iZ1NQ MlFnVVpRTGs4STVGYnoyYncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU8WADoQhkjrFOCpTX36sMupLu3p5UrXMmHQiBTTb/DBPI+CbwERHYSQJNviq NGj/iiDrx5TNli2kiEUSlnPcibcVFozVtfnnyF+7tWNOOutK/2/OCzgUVlZO68C0 bLCluEfBZ3ofBvuBiLcCOwNusHdxeiA4hAcXK5iDs2YDfWTl1MtIbSWXzKPZkuGv x/bSsJOxoeSsm9aFg2np41BMW1MHs0f/w+XuU7JDV6TJv+zSoHWK6kNMWQrHM//k henb+KGyrhaIEQQ7wHFSJe4C7OPA3/YEFZO+MRyTf2pXhez5B5qlY3QrfDo1KlMr n13xPDpKnxjTnRqtSMQdn9bgiA== -----END CERTIFICATE-----Generated at Mon Sep 21 03:28:07 2026 by rpki-client